[unisog] IRC botnet on 65.61.254.124

Florian Weimer fw at deneb.enyo.de
Tue Aug 31 19:21:24 GMT 2004


* Michael Holstein:

> Server is 65.61.254.124 (in2net.com -- in Canada) port 19899.

This appears to be related to exploited.lsass.{cc,info,org}:

exploited.lsass.cc      A       65.61.254.124
exploited.lsass.info    A       65.61.254.124
exploited.lsass.org     A       65.61.254.124

Currently, these records point to:

81      | 152.3.43.95      | MCC-195 MCNC Center of Communi
13092   | 147.91.176.47    | UB-AS Univerzitet u Beogradu  
26753   | 65.61.254.124    | IN2N In2net Network Inc.      
32071   | 161.6.204.248    | WKU Western Kentucky Universit

Maybe someone has contacts over there?



More information about the unisog mailing list